Course Outline
Auditing, Evaluation, and Organizational Governance
- Distinguishing between auditing, evaluation, review, and inspection
- The role of internal audit in governance and assurance
IIA International Standards and Code of Ethics
- The IPPF framework and its mandatory components
- Independence, objectivity, and professional conduct
Risk-Based Audit Planning and Scope Definition
- Mapping assurance activities and defining the audit universe
- Setting engagement objectives, criteria, and scope
Audit Programs, Evidence, and Working Papers
- Managing audit programs under ISO 19011
- Ensuring evidence is sufficient, reliable, and properly documented
Auditing ISO 9001 Quality Management Systems
- Applying the process approach and risk-based thinking
- Grading nonconformities and evaluating process performance
Auditing ISO 27001 Information Security Management Systems
- Reviewing Annex A control domains and risk treatment
- Assessing information security evidence and sampling methods
Data Collection and Preparation for Audit Analytics
- Identifying source systems, data extracts, and data dictionaries
- Performing data cleaning, validation, and completeness checks
Analysis Techniques, Sampling, and Full-Population Testing
- Conducting trend, ratio, and reasonableness analyses
- Comparing sampling methods with full-population testing
AI and Automation in the Audit Process
- Utilizing automated audit software and workflow tools
- Leveraging Generative AI for evidence review and report drafting
Anomaly Detection and Fraud Indicator Analysis
- Applying rule-based and statistical outlier detection
- Implementing Benford's law analysis
- Testing for duplicates, gaps, and exceptions
Forensic Auditing Basics
- Understanding fraud types and red flag indicators
- Defining investigation scope and maintaining the evidence chain
Digital Forensic Tools and Evidence Management
- Performing evidence imaging and hash verification
- Analyzing timeline and email metadata
Cybersecurity Risks and IT General Controls
- Reviewing access, change, and operational controls
- Assessing the cyber threat landscape for audit planning
Cloud Infrastructure and Data Privacy Assessment
- Evaluating shared responsibility models and cloud configurations
- Checking data protection and privacy compliance
COSO Enterprise Risk Management
- Exploring the five components and ERM principles
- Defining risk appetite, tolerance, and portfolio perspective
Applying ISO 31000 Risk Management
- Implementing the risk management process and principles
- Maintaining risk registers, key risk indicators, and treatment plans
Compliance Programs and AML Prevention
- Testing compliance frameworks and controls
- Analyzing AML typologies, screening, and transaction monitoring
Integrated Audit Simulation and Reporting
- Executing an end-to-end audit of a simulated business cycle
- Reporting findings, root causes, and follow-up actions
Requirements
- Professional experience in administrative, financial, compliance, or auditing functions.
- Proficiency in using spreadsheets for basic data management.
- No prior background in programming or statistics is necessary.
Target Audience
- Auditors and supervisors responsible for ensuring audit and evaluation quality.
- Internal auditors and compliance professionals transitioning to data-driven testing.
- Finance, administrative, and operations personnel who participate in or are subject to audits.
Testimonials (3)
Fun to talk
Jihan Fadila - BAF
Course - Root Cause Analysis (RCA) for Internal Audit
The trainer was helpful..
Attila - Lifial
Course - Compliance and the Management of Compliance Risk
Speed of response and communication
